The following parameters are now available:
* hardeningDisable
To disable specific hardening flags
* hardeningEnable
To enable specific hardening flags
Only the cc-wrapper supports this right now, but these may be reused by
other wrappers, builders or setup hooks.
cc-wrapper supports the following flags:
* fortify
* stackprotector
* pie (disabled by default)
* pic
* strictoverflow
* format
* relro
* bindnow
Now we always enable large file support, as it should be cheap enough,
and avoids also problems on some filesystems #10181.
The minimal build disables (almost) all options, so it was building
without large file support. However, in musl the `off_t` is *always*
64-bit, which lead to problems, now detected during build time.
This starts with "make allnoconfig" rather than "make defconfig",
making it easier to turn on only the needed features.
Also, fix broken .config generation (the presence of "#" lines
confused parseconfig).